VALO engages a small set of subprocessors to host and operate the Verdiq platform. Each is bound by data-protection terms no less protective than our Data Processing Addendum, and each is chosen to keep customer data within the region wherever possible. The set below reflects our intended launch configuration; because the platform is pre-general-availability, specific vendors may change, and any change follows the notice process in the next section.
Current subprocessors
| Category | Purpose | Primary region |
|---|---|---|
| Cloud infrastructure | Hosting, storage, and managed databases for the platform and customer data | Singapore |
| Content delivery and DDoS protection | Serving static assets and protecting the edge | Global edge, SEA-routed |
| Transactional email and notifications | Account, security, and workflow notifications | Singapore / EU |
| Error and performance monitoring | Detecting and diagnosing platform faults | EU / Singapore |
| Payment processing | Billing for paid subscriptions (handled by the processor, not stored by VALO) | Global |
VALO does not use general-purpose external AI providers to process customer data in the product; AI runs through VALO's own abstractions with a rule-based default, and any opt-in external model is gated and disclosed per organization.
Changes and notice
We will give at least thirty days' notice before adding or replacing a subprocessor that processes Customer Personal Data. Customers may subscribe to change notifications and may object on reasonable data-protection grounds by writing to dpo@valotech.org.
Contact
Questions about our subprocessors: dpo@valotech.org.